Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa
File:                     eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa (raw, json)
Hash identifier:          zcQjLVZo2ZvLmtDyTa3G6NSXk/CTyJRQaUYVclrAkYk=
Subject key identifier:   87:6A:A9:4C:E7:70:16:5F:1F:C1:90:F2:D5:83:B7:6F:99:9B:DF:D2
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584AC8764E6E3DA2A020333965B0
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     5662
IP address blocks:        157.166.148.0/22 maxlen: 24
                          157.166.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:4e:6e:3d:a2:a0:20:33:39:65:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=e3f95813-03f8-4eb1-abaa-6b1294f829ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:96:c6:d4:3d:77:65:f4:92:55:ca:57:c1:
                    8c:01:01:df:6c:cd:29:66:d1:97:26:58:24:46:58:
                    65:24:f3:73:90:a1:4c:e0:06:8a:f0:e6:ec:fe:0b:
                    33:e8:c2:5f:66:b9:ea:60:52:14:06:05:b0:a2:3f:
                    dd:8b:b6:43:6d:13:f2:4a:93:77:16:e7:13:ea:dc:
                    64:3a:a1:e9:4f:aa:e6:e4:47:58:d3:69:26:d1:16:
                    b9:f1:4b:6a:42:32:9e:17:06:8e:7c:87:c9:f1:0f:
                    bb:3e:5f:b9:0e:5d:72:4b:82:24:0f:4d:66:a1:06:
                    f5:f5:b7:04:5d:50:ac:39:a7:59:89:15:f2:8c:74:
                    37:88:de:e2:e9:dd:26:23:ea:65:c5:cc:a7:c3:eb:
                    c1:8e:8b:09:50:64:2c:b9:39:d9:a7:d8:0e:6c:46:
                    e5:4c:f7:e5:1c:35:ae:6c:36:54:c4:71:fc:1d:70:
                    32:d2:61:a5:0a:ab:39:16:8b:75:a4:8e:43:7d:bb:
                    e9:99:39:3e:ab:77:19:5e:69:c3:3d:88:2b:01:a6:
                    e5:e4:e0:21:f2:4a:30:e3:af:38:c5:b4:d9:df:4c:
                    40:10:56:c9:0d:b4:bd:70:a0:37:dd:93:e6:f1:ef:
                    c5:d0:25:5f:2a:fb:61:a3:76:23:6d:cd:13:16:d5:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:A9:4C:E7:70:16:5F:1F:C1:90:F2:D5:83:B7:6F:99:9B:DF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/eddf452d-1527-3813-a5df-7c9e9dbcfba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.148.0-157.166.152.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c7:30:d7:fe:fb:bc:85:82:0d:f4:eb:0a:bd:64:0a:4b:a0:
         76:d5:b7:54:8a:55:9c:f4:db:db:20:ca:2f:6b:1e:cd:90:b5:
         5b:e4:7b:1d:87:68:69:b1:1b:d7:70:3a:cd:32:e5:42:8f:7a:
         11:de:17:57:1b:2a:83:dd:6b:89:68:be:a4:57:b0:01:f0:be:
         15:03:a5:22:25:40:18:5d:5a:8f:2d:b9:04:4c:04:ef:47:fd:
         8c:41:22:4d:e9:5a:d4:80:b8:b4:78:21:2c:7d:42:5f:92:de:
         16:8d:c2:e9:7b:39:d6:66:30:8e:c4:2b:b9:f0:6a:a9:24:e9:
         65:f0:7c:38:bd:c8:37:a1:6b:83:56:fe:3d:a8:12:8a:eb:89:
         54:50:82:8e:45:95:36:b5:b0:07:98:7a:81:60:de:c7:6a:db:
         a3:93:d2:09:5f:40:f2:05:ad:60:0c:83:4b:60:9a:94:ed:c2:
         dc:2b:22:01:a7:5c:ba:9c:8a:00:45:4a:ca:20:31:32:2c:c4:
         f4:13:0c:28:79:5f:35:07:83:09:d8:13:10:04:cc:f7:39:d3:
         49:eb:45:a1:15:da:9c:83:d1:59:22:b1:76:5b:42:44:8a:56:
         5e:12:8f:64:84:86:5f:67:d9:df:b2:90:fa:ff:85:77:a2:41:
         42:6d:9f:e0
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErIdk5uPaKgIDM5ZbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi
OTU1MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTNmOTU4MTMtMDNmOC00ZWIxLWFiYWEtNmIxMjk0ZjgyOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZmWxtQ9d2X0klXKV8GMAQHfbM0pZtGXJlgk
RlhlJPNzkKFM4AaK8Obs/gsz6MJfZrnqYFIUBgWwoj/di7ZDbRPySpN3FucT6txk
OqHpT6rm5EdY02km0Ra58UtqQjKeFwaOfIfJ8Q+7Pl+5Dl1yS4IkD01moQb19bcE
XVCsOadZiRXyjHQ3iN7i6d0mI+plxcynw+vBjosJUGQsuTnZp9gObEblTPflHDWu
bDZUxHH8HXAy0mGlCqs5Fot1pI5DfbvpmTk+q3cZXmnDPYgrAabl5OAh8kow4684
xbTZ30xAEFbJDbS9cKA33ZPm8e/F0CVfKvtho3Yjbc0TFtWB1QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFIdqqUzncBZfH8GQ8tWDt2+Zm9/SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz
NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZWRkZjQ1MmQtMTUyNy0z
ODEzLWE1ZGYtN2M5ZTlkYmNmYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm
M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm
Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1
Y2UwZmI5NTUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKdppQD
BACdppgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAq8cw1/77vIWCDfTrCr1kCkugdtW3VIpVnPTb2yDKL2se
zZC1W+R7HYdoabEb13A6zTLlQo96Ed4XVxsqg91riWi+pFewAfC+FQOlIiVAGF1a
jy25BEwE70f9jEEiTela1IC4tHghLH1CX5LeFo3C6Xs51mYwjsQrufBqqSTpZfB8
OL3IN6Frg1b+PagSiuuJVFCCjkWVNrWwB5h6gWDex2rbo5PSCV9A8gWtYAyDS2Ca
lO3C3CsiAadcupyKAEVKyiAxMizE9BMMKHlfNQeDCdgTEATM9znTSetFoRXanIPR
WSKxdltCRIpWXhKPZISGX2fZ37KQ+v+Fd6JBQm2f4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:17 2025 by rpki-client